Event ID:
4867
Category:
Policy Change
Subcategory:
Authentication Policy Change
Supported on:
Windows Vista, Windows Server 2008
A trusted forest information entry was modified.
Subject:
 Security ID:  %1
 Account Name:  %2
 Account Domain:  %3
 Logon ID:  %4
Trust Information:
 Forest Root: %5
 Forest Root SID: %6
 Operation ID: %7
 Entry Type: %8
 Flags: %9
 Top Level Name: %10
 DNS Name: %11
 NetBIOS Name: %12
 Domain SID: %13
